Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
File:                     jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft (raw, json)
Hash identifier:          AiPWsQ1o/Cj3WCzyf12Hj+f/kV1l/3i/Be6DNtqbotY=
Subject key identifier:   A2:F8:99:33:10:8B:FC:C3:EE:D6:DF:ED:A5:A2:02:27:D1:75:65:FA
Authority key identifier: 8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54
Certificate issuer:       /CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
Certificate serial:       0191FB22D41260603C86C75588A7E632A7BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
Manifest number:          0110
Signing time:             Mon 16 Sep 2024 14:00:49 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:49 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:49 +0000
Files and hashes:         1: jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl (hash: wwAJRGQlBta/iq4woKsxAqTB4vtF036OAkW359ugLTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:d4:12:60:60:3c:86:c7:55:88:a7:e6:32:a7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb6fe65673fb128bb445a5f4dfb9ba58e019854
        Validity
            Not Before: Sep 16 14:00:49 2024 GMT
            Not After : Sep 17 14:00:49 2024 GMT
        Subject: CN=a2f89933108bfcc3eed6dfeda5a20227d17565fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:4f:70:6f:ec:09:ab:47:1b:da:01:04:1d:
                    af:92:f8:5b:d2:d7:6a:57:e5:63:61:22:e1:a6:29:
                    7f:bc:94:ab:f1:33:e0:a2:e9:65:70:5e:77:79:50:
                    f5:d1:ca:39:ad:e8:7b:97:b3:4a:4a:43:90:6f:09:
                    f1:44:29:ab:62:cb:1c:b0:41:b4:c0:5f:7e:2d:af:
                    0d:b4:af:d6:70:25:8d:9f:e9:63:43:7a:9a:f5:63:
                    67:18:2c:8c:70:1c:66:d0:34:3a:31:a9:82:55:a3:
                    00:0f:86:2d:ed:6b:60:46:ef:ec:34:d9:55:51:f3:
                    08:ca:df:71:50:67:86:cd:e3:a5:e9:e3:87:fe:10:
                    40:f0:41:82:d1:99:e1:80:23:42:8b:93:b2:ea:b9:
                    97:75:b1:20:07:cf:3c:8b:21:ab:a4:c5:fa:a1:d3:
                    24:f9:60:ee:c7:b8:2b:e2:b9:b4:65:1f:ee:e9:80:
                    f9:1c:56:a7:27:eb:a4:95:cf:b2:31:81:4c:a7:cd:
                    b2:53:75:8f:c0:bc:b2:37:26:14:bd:5a:a5:e1:2c:
                    b6:32:94:49:cb:50:22:89:20:eb:b8:49:1f:91:ea:
                    a7:a0:13:d7:fb:f7:ec:25:85:f4:61:02:3e:82:78:
                    05:46:e3:fa:1f:3a:aa:83:b9:8f:88:34:12:97:54:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:99:33:10:8B:FC:C3:EE:D6:DF:ED:A5:A2:02:27:D1:75:65:FA
            X509v3 Authority Key Identifier:
                keyid:8C:B6:FE:65:67:3F:B1:28:BB:44:5A:5F:4D:FB:9B:A5:8E:01:98:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/713cdf-b72c-4ce9-ac4f-89e9d48a4365/1/jLb-ZWc_sSi7RFpfTfubpY4BmFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c8:2e:ac:8d:dc:c5:b9:00:ab:7b:58:5e:c7:77:c6:42:98:
         dd:53:16:b1:b3:1d:1c:b6:7c:d3:f6:1e:5d:c9:d2:4d:f3:66:
         de:57:55:f7:05:14:e4:b9:e9:1e:e7:52:ce:93:2b:cc:15:8d:
         17:10:39:1a:7f:1f:3e:02:a9:91:98:3c:a5:b4:5c:4a:92:a8:
         41:fa:a3:7f:22:30:c0:03:f3:46:5e:a9:8b:f5:fe:df:fb:5e:
         92:39:c6:3f:66:79:79:d7:16:54:89:2e:d2:45:e5:62:9f:65:
         03:3a:99:4c:82:c9:39:4b:47:08:97:05:33:4a:e4:b1:47:92:
         c6:8a:ff:57:bf:1f:7a:cd:47:60:2e:7b:1b:bc:91:22:69:d5:
         d4:f7:5c:70:10:8a:8f:69:63:cb:60:a2:32:52:49:8c:c7:cc:
         51:43:14:fc:32:25:0d:3b:5c:8a:ae:1c:4d:03:d4:7f:cc:5c:
         9a:ed:76:0a:83:b5:bb:19:c7:b8:1f:51:d3:23:67:7f:b7:7a:
         29:d1:90:4b:cf:75:00:91:64:7c:ac:31:bb:e9:de:49:0c:c6:
         d6:36:d7:80:a8:bc:39:2b:89:f0:c5:44:fb:77:6a:c4:84:f9:
         d4:ca:ef:ee:87:ae:aa:cb:ba:f0:d2:14:32:e9:0e:59:a7:db:
         4b:8f:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----